Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/zVbXzI-UPMkwGTXNir_RXndD_f4.roa
File: zVbXzI-UPMkwGTXNir_RXndD_f4.roa (raw, json)
Hash identifier: MjYQ6ywejwH4Sh9xenn14d9jTdhqTv1lV7PDpz2ptA4=
Subject key identifier: CD:56:D7:CC:8F:94:3C:C9:30:19:35:CD:8A:BF:D1:5E:77:43:FD:FE
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 018CC26D03E4F91A3437F80F3E9637D9F599
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/zVbXzI-UPMkwGTXNir_RXndD_f4.roa
Signing time: Mon 01 Jan 2024 00:29:33 +0000
ROA not before: Mon 01 Jan 2024 00:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.82.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:03:e4:f9:1a:34:37:f8:0f:3e:96:37:d9:f5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd56d7cc8f943cc9301935cd8abfd15e7743fdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:81:1d:99:67:50:4f:99:58:23:9d:d6:57:
c9:da:99:ff:36:31:76:6f:87:7b:28:8e:2d:e9:65:
79:e4:99:5c:57:ba:c9:b2:a6:71:3c:84:71:bf:a8:
18:71:ab:22:9f:f0:c4:0b:43:51:23:ce:de:bd:bc:
ae:48:25:69:ed:18:37:dd:5e:e9:e5:72:3c:ba:2d:
0a:9e:dc:c0:19:d0:d7:0f:68:8e:1c:12:33:9a:73:
0a:a5:ca:73:e3:e0:44:8f:ba:09:f4:e0:fb:f3:6c:
fe:61:30:13:83:82:6a:7d:05:5e:ee:a1:92:aa:bd:
7c:b2:0a:2a:31:0b:3e:f9:d9:32:11:9a:4b:8c:96:
74:2a:7b:01:e4:ad:f7:ab:2d:3c:85:94:ef:a7:3b:
0d:df:d3:f6:f2:2e:b2:48:8c:8e:0a:f3:d4:52:72:
21:08:b8:d7:ef:28:f9:29:d5:ef:85:5f:0e:a7:55:
50:7c:e8:26:5e:bb:5f:99:e6:90:ec:85:46:1a:73:
a9:99:35:e3:e3:27:53:a4:26:73:49:0a:a0:31:a6:
95:5a:a2:64:3a:05:1d:93:f2:b1:c3:d3:aa:d8:d0:
92:e2:bf:26:34:ea:e8:c3:93:e5:0b:a8:3b:c2:94:
41:ce:87:91:37:d8:f7:4e:6c:1a:2d:46:77:14:d1:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:56:D7:CC:8F:94:3C:C9:30:19:35:CD:8A:BF:D1:5E:77:43:FD:FE
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/zVbXzI-UPMkwGTXNir_RXndD_f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.42.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:66:bc:b6:82:ff:00:a3:77:6b:90:cd:63:27:a9:40:da:73:
a4:cc:6f:57:e9:15:e6:f6:6b:56:eb:91:69:c7:e5:9a:5d:8c:
df:b3:0d:da:b2:f2:e8:d6:ac:59:c5:04:af:54:37:ce:89:32:
73:50:80:c4:9f:58:ae:15:3a:c2:f9:c3:a3:c4:34:bd:ad:b0:
a7:df:b8:db:d6:78:1c:14:8d:a5:bf:5e:e4:07:08:05:95:e1:
78:0f:a0:33:77:1d:fe:9e:25:8b:6d:f4:99:30:23:3a:ea:5b:
2b:08:1b:e8:a9:16:4a:6e:b4:ed:8b:a3:92:62:1e:2f:d3:a7:
76:e1:74:f9:e7:c8:89:e2:1e:d1:f8:b9:34:96:56:42:20:c5:
47:7e:11:28:80:7f:83:3a:f4:44:cf:05:d3:3d:d9:ad:f5:a1:
1d:fe:ce:be:0e:a5:4e:50:34:69:53:00:a0:72:56:dc:e4:c3:
d2:cf:8c:fd:84:bb:51:65:d8:c8:dc:7d:b2:e7:80:18:6c:87:
04:77:8f:c9:53:19:5a:4e:80:5a:62:6d:78:96:97:47:ea:91:
c6:3e:30:53:a0:3e:53:97:b1:25:23:93:66:fd:5e:6f:bb:8c:
4e:d5:bf:8e:a5:cb:a4:31:04:83:96:b8:15:d9:f5:7d:b8:fd:
de:ce:16:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:48:02 2024 by rpki-client on console-ams.rpki-client.org